arXiv:1503.01688v2 [quant-ph] 11 Aug 2015 


Device-independent quantum key distribution with generalized two-mode Schrodinger 

cat states 


Curtis J. Broadbent, 1,2 ’ 3 Kevin Marshall, 4 Christian Weedbrook, 5 and John C. Howell 2,3 

1 Rochester Theory Center, University of Rochester, Rochester, NY 14627 
2 Center for Coherence and Quantum Optics, University of Rochester, Rochester, NY 14627 
3 Department of Physics and Astronomy, University of Rochester, Rochester, NY 14627 
4 Department of Physics, University of Toronto, Toronto, ON M5S 1A7, Canada 
5 QKD Corp., 60 St. George St., Toronto, M5S 1A7, Canada 
(Dated: August 12, 2015) 

We show how weak non-linearities can be used in a device-independent quantum key distribution 
(QKD) protocol using generalized two-mode Schrodinger cat states. The QKD protocol is therefore 
shown to be secure against collective attacks and for some coherent attacks. We derive analytical 
formulas for the optimal values of the Bell parameter, the quantum bit error rate, and the device¬ 
independent secret key rate in the noiseless lossy bosonic channel. Additionally, we give the filters 
and measurements which achieve these optimal values. We find that over any distance in this 
channel the quantum bit error rate is identically zero, in principle, and the states in the protocol are 
always able to violate a Bell inequality. The protocol is found to be superior in some regimes to a 
device-independent QKD protocol based on polarization entangled states in a depolarizing channel. 
Finally, we propose an implementation for the optimal filters and measurements. 


The last two decades have seen a rise in the number 
and quality of quantum key distribution (QKD) protocols 
[1-3]. Some of these have been developed into successful 
commercial products currently deployed in telecommuni¬ 
cations [4, 5]. These systems are designed on the prin¬ 
ciple of provably secure communication, in which, under 
certain assumptions, the security is guaranteed by the 
laws of physics, not the assumed difficulty of performing 
certain mathematical operations as in classical cryptogra¬ 
phy protocols. Unfortunately, practical implementations 
of QKD protocols have in many cases fallen short of their 
desired goal; due to rate ceilings, current QKD systems 
are used only to generate keys for use with standard cryp¬ 
tographic protocols. Additionally, in recent years both 
research and commercially developed QKD systems have 
been successfully hacked using side-channel information 

Ml]. 

In response to these limitations, there has been an 
effort to develop QKD protocols which are immune to 
the practical limitations of the devices in which they 
are implemented. These protocols are called device¬ 
independent QKD (diQKD) protocols and are based on 
violation of Bell and EPR-steering inequalities [22-26]. 
If a particular physical implementation of the device¬ 
independent QKD protocol is able to violate a Bell in¬ 
equality, then the resulting key can be considered to 
be secure, regardless of the details of the physical im¬ 
plementation. Device-independent QKD protocols have 
been shown to be secure under collective attacks and 
in some instances are secure under coherent attacks 
[23, 24, 27, 28]. 

Though device-independence provides a way around 
the security limitations of previous QKD protocols, it 
further restricts the secret key generation rate which 
may be obtained. As a result, there is a growing in¬ 


terest in trying to implement diQKD in diverse systems 
in an attempt to increase the secret key generation rate. 
With that in mind, in this manuscript we present an 
alternative implementation of diQKD which makes use 
of highly non-Gaussian states: phase-entangled coherent 
states. We show here that in certain bosonic channels, 
phase-entangled coherent states have secret key rates 
competitive with state-of-the-art diQKD systems, includ¬ 
ing diQKD systems based on discrete variables. Beyond 
being competitive with state of the art systems, we also 
show that phase-entangled coherent states allow for a 
high degree of flexibility in the deployment of the QKD 
protocol. This could be helpful in situations where the 
properties of the channel, in particular, the total trans¬ 
mission rate, are variable over time. Additionally, though 
the phase-entangled coherent state is non-Gaussian, it is 
relatively easy to generate, requiring only a single photon 
source and a relatively weak Kerr non-linearity [29]. 

Device-independent quantum key distribution pro¬ 
ceeds in the following manner. Two distant parties, Al¬ 
ice and Bob, receive entangled pairs from a distant third 
party, who is possibly under the control of an eavesdrop¬ 
per, Eve. We assume that the measurement device may 
not be trustworthy having possibly been manufactured 
by Eve. Alice and Bob are able to set their devices to 
measure the operators {A 0 , A\, A 2 } and {Bi,B 2 } respec¬ 
tively; they record outcomes {di,bj} which take values 
in {—1,1}. We assume that Alice and Bob are in se¬ 
cure locations; they are able to confirm that their de¬ 
vices do not transmit signals of any kind to Eve. Alice 
and Bob select their measurement settings at random for 
each photon they measure. After all measurements have 
been performed, Alice and Bob communicate the bases 
in which measurements where made. Measurements per¬ 
formed in the bases {A 0 , B t } are used to generate a secret 
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key and determine the quantum bit error rate (QBER) 
Q = prob(ao 7 ^ b 1 ). Measurements performed in the ba¬ 
sis {A i: Bj} ( i,j £ {1,2}) are used to determine whether 
a Bell inequality is violated. Measurements performed in 
the basis {Ao, 8 2 } are assumed to be uncorrelated and 
are discarded. 

We consider the phase-entangled coherent state which 
is created by the entangling interferometer described in 
[30], 


1^) = (l«+)l«-)- \ a -)\ a +))/ N , (!) 

where |a±) are coherent states with oppositely rotated 
phases |a±) = \ae ±lcl> ) with a > 0 where N = 
vw — q 2 ) and 7 = | (a+|a_) |. The phase-entangled 
coherent states are equivalent to displaced Schrodinger 
cat states, 


\tp) = {T>(a cos <j>) 3 T>(a cos <j>)) x 

m-v)-\-m))/N, 

where /3 = iasin^. Additionally we note that antisym¬ 
metric states of this type have a concurrence of 1 , are rel¬ 
atively robust to photon loss and are able to violate a Bell 
inequality after a distance 400 km using state discrimi¬ 
nation techniques assumming loss of 0.15dB/km [29]. In 
the following, we show that in principle, with optimal 
measurements, the phase-entangled coherent states can 
give rise to Bell inequality violation at any distance. It 
is this property we leverage for our device-independent 
QKD protocol. 

Once generated, the phase-entangled coherent states 
pass through an optical fiber to Alice and Bob. We model 
the loss incurred in the fiber as beam-splitter loss with 
transmission and reflection coefficients t and r, respec¬ 
tively, where |t | 2 + |r | 2 = 1 , and where the other input 
mode of the beam-splitter is in the vacuum state. The 
resulting state is given by 

W) = (\ta + )\ta-)\ra + ) L \ra-) L 

-\ta^)\ta + )\ra-) L \ra + )i}j/N, (3) 


where we have assumed for simplicity that the loss coeffi¬ 
cients for the fiber to Alice are equal to those for the fiber 
to Bob. The subscript L in (3) refers to the lossy modes 
of the optical fiber, where we establish the convention 
that in products of the form \-)l\-)l the first ket always 
refers to the lossy modes of Alice’s fiber and the second 
to Bob’s, and single kets of the form |-)i refer generally 
to the joint space of Alice and Bob’s lossy modes. 

We define the orthonormal states following the work of 
[31], which will be of use in tracing out the lossy modes 


and quantifying the entanglement of the remaining state, 

l±> “ ( e * 5t/2 l to +> ± e ~ i5t/2 \ to ->) - ( 4a ) 

l±>£ = (\ra+) L \ra_) L ± |ra_) L |ra + ) I ^ , (4b) 

where N± = i/2(l ± q t ) and M± = y/2(l ± 7 ^), with 
lq = I (Q a +\Q a ~) I = 7 ^ and 5 t = arg (ta + \ta_). It will 
also be helpful to write out the inverse relationships, 

P = F*^t/2 / \ 

|ta±> = — 2 ~ [N + \+)±N_\-)j, (5a) 

\ra ± ) L \ra T ) L = ^(m + \+) l ± . (5b) 

Substituting (5) into (3) and tracing over the lossy 
modes, we arrive at the following mixed state written 
in the basis of {| + +), | + -), | —b), |-)} 

A '/ 2 M 2 

p= w^ (N + + 

( 6 ) 

where |tf) = (N 2 \ + +) - A^ 2 | - -))/y / ^ + Nt and 

|d>) = (| + -)-|-+))/v / 2. 

We use this form of p to determine the optimal filter¬ 
ing operations for single-copy entanglement distillation. 
The optimal filters Ma <3 Mb are those which result in 
a Bell-diagonal state, have maximum probability of suc¬ 
cess, and satisfy the requirements of being a valid filtering 
operation [32]. A Bell-diagonal state is one which can be 
expressed as a mixture of Bell states. The probability of 
success of the filtering operation is given by 

p = Tr (M a <g> M B )p(M A ® M b )K (7) 


Finally, a valid filtering operation M t has the property 
that (1 — Ml Mi) is a positive operator. We introduce 
the state g to simplify the algebra, 


a 

0 

0 

—y/ad\ 

0 

b 

-b 

0 

0 


b 

0 

\fad 

0 

0 

d / 


where the quantities in g are defined by the relation 
Q = p, i.e. a = MlNl/ilGN 2 ), b = M 2 N 2 N 2 /(16N 2 ), 
and d = M 2 N^/(16N 2 ). Consequently, we note that 
a > d since N + > N_. Using the method described by 
Verstraete et al. [32] it can be shown that the optimal 
filtering operations are given by 


M A = M b 


( ( d /f 4 0) 


(9) 
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also written as Ma = Mb = (d/a) 1 / 4 |+)(+| + |—)(—|. 
The state after the filtering operation is given by 


Q 


/ 


1 

2(6 + '/ad) 


ol 

0 

0 

—y/ad\ 

0 

b -b 

0 

0 

-b b 

0 

\—y/ad 0 0 

'/ad ) 


( 10 ) 


Except for the case where /ad = b , the state g' is always 
able to violate a Bell inequality. A set of measurements 
which give rise to the maximum value of the Bell param¬ 
eter are 


Ai = cos tpa x + sin tpa y , Bi = —cr x , 
A ‘2 = cos ipa x — sin ipcTy, B 2 = — a y , 


(14) 


which occurs with a probability of success of p = 
2 /d/a(b+/ad ). Since a, b , and d are all positive, we see 
that the filtering operation always has a non-zero proba¬ 
bility of success. 

Following the work of Horodecki et al. [33], we can 
use the correlation matrix to determine the maximum 
possible Bell violation after the filtering operations. We 
briefly review how this is done. The correlation matrix 
C is defined to be C z j = TV (ai (S> cr/g 1 , where ai and aj 
are the standard Pauli matrices in the basis {|+), |—)}, 
withi,j £ {x,y,z}. A dichotomic measurement operator 
A with eigenvalues of ±1 can be represented by the unit 
vector a = ( a x , a y ,a z ) where A = a x a x + a y a y + a z a z . It 
is straightforward to show that a joint dichotomic mea¬ 
surement (A®B) can be calculated using the correlation 
matrix as (A® B) = a.C.b, where we define b for oper¬ 
ator B similar to a. Consequently, the Bell parameter is 
given by 


(S) = ( ai + a 2 ).C.b + (a, - a 2 ).C.b 2 , (11) 

where S = Ax <B> Bi + A 2 <8> Bi + A\ ® B 2 — A 2 <g> B 2 . 
The form of the Bell parameter given in (11) lends itself 
easily to constrained maximization techniques as shown 
by Horodecki et al. [33]. The maximum value of the Bell 
parameter is given by S max = 2/ s\ + s| where Si and 
s 2 are the largest two singular values of the correlation 
matrix. The left- and right-singular vectors 1; and r, of 
the correlation matrix can be used to determine a set of 
measurements which acheives the maximum value of the 
Bell parameter. Specifically, 

a x = cos ip\\ + sin tp 1 2 , bi = ri, 
a 2 = cos<p li — sin y>l 2 , b 2 = r 2 , 

where cosy> = S\//s\ + with (0 < ip < 7t/4). Map¬ 
ping the vectors in (14) back to operators in the two-qubit 
Hilbert spaces yields the appropriate measurements for 
achieving the maximum value of the Bell parameter ex¬ 
perimentally. 

In our specific case, i.e. for the state g', the cor¬ 
relation matrix is diagonal with values C xx = — 1 and 
C yy = C zz = — (b — /ad)/(b + \fad). Consequently, the 
maximum value of the Bell parameter is 


A, r 1 ;rx — 2 


\ 


1 + 


b — \fad 
b + \[ad 


(13) 


where cosy) = 2/A max with (0 < y> < 7 t/ 4 ). 

We now express the probability of success and the max¬ 
imum value of the Bell parameter in terms of the initial 
overlap 7 and the total transmission probability T = |t| 2 , 


T \2 


p= ( 1 -r) 

P 1 - 7 2 ’ 

A ma x = 2v / 1+7 4(1 - T) - 


(15) 

(16) 


We see in (16) that for a pure-loss channel, optimally fil¬ 
tered phase-entangled coherent states are able to violate 
a Bell inequality at any distance. Finally, as can be de¬ 
duced from the value of C xx , measurements made in the 
o’x ® a x basis are always perfectly anti-correlated regard¬ 
less of the value of 7 or T. If A 0 = a x then, in principle, 
the QBER for the phase entangled coherent states will 
be exactly zero, <5 pe cs = 0. These two remarkable re¬ 
sults, Bell inequality violation as well as zero QBER at 
any distance are a result of the noiseless nature of the 
pure-loss channel considered here, and are not expected 
to extend to channel models which include noise. 

We can use the probability of success, the maximum 
value of the Bell parameter, and the QBER to deter¬ 
mine a secret key rate for a device-independent imple¬ 
mentation of the protocol. This is done by noting that 
the Holevo information between Eve and Bob can be 
bounded using the Bell violation, 


xi B i, E ) < h 


l+y/(S/2)*-l ^ 


(17) 


where the Holevo information is equal to the quantum 
mutual information of the joint state shared by Bob and 
Eve after Bob’s measurements have been performed [23]. 
In (17), h is the binary Shannon entropy. Noting that 
the mutual information between Aq and B\ is 1 and using 
the Holevo information in (17), we find that the Devetak- 
Winter rate for the optimally filtered state is given by 


row 


1 -h 


1 +7 2 (1 -T) 


(18) 


Consequently, the raw secret key fraction AT, under col¬ 
lective attacks and with one-way classical post-processing 
from Bob to Alice is bounded by the probability of suc¬ 
cessful filtering times the Devetak-Winter rate, 


K > p r D w 


( 1 ~ 7 T ) 2 
1 — 7 2 





(19) 
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Figure 1. The secret key fraction K as a function of the dis¬ 
tance between Alice and Bob assuming a loss coefficient of 0.2 
dB/km and the optimal 7 for the specified distance. This plot 
gives the raw fraction; it does not include finite detection effi¬ 
ciencies, dark counts, thermal noise, or the relative sampling 
frequency of the {Aq,Bi} measurement. 
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Figure 2. Plot of the critical QBER Q C rit. as a function of dis¬ 
tance, see text for details. The biphoton approach is superior 
in the gray region, corresponding to Q < Q C rit.- The phase- 
entangled coherent state approach is superior in the white 
region, corresponding to Q > Q c r i t .. The discrete variable 
diQKD approach using biphotons cannot be used when the 
QBER exceeds the dashed black line. 


Since 7 is a free parameter to be set by Alice and Bob 
given knowledge of the total transmission T, we may op¬ 
timize the secret key fraction as a function of 7 . We 
plot the resulting secret key fraction in Fig. 1. The to¬ 
tal secret key rate is just the product of the secret key 
fraction, the {Ao,Bi} sampling probability, and the raw 
repetition rate of the source. 

For large distances, to lowest order in the total trans¬ 
mission T, the optimal secret key fraction scales as T 2 . 
The scaling coefficient is given by 


log 2 7 


1 — 7 2 



( 20 ) 


which has a maximum of approximately 4.6% when 
7 ~ 0.74. By comparison, due solely to loss, the se¬ 
cret key fraction for a biphoton entangled source scales 
no better than T 2 irrespective of the QKD protocol. This 
indicates that compared against an error-free biphoton- 
based QKD protocol, our protocol can never have a secret 
key rate worse than 4.6% of that which can be achieved 
in a biphoton-based protocol. In the presence of noise, 
however, our protocol can drastically outperform some 
biphoton-based diQKD protocols, as we now discuss. 

We make a comparison to a diQKD protocol based 
on polarization entangled states subject to depolarizing 
noise [24], In this case, depolarizing noise increases the 
probability of error and decreases the Bell violation. The 
resulting secret key fraction has been shown to be given 

by 


Abiphoton — T 2 ( 1 


h{Q) - h 


\+^{S/2Y-\ 

2 



where S = 2y / 2(l — 2 Q) [24]. To permit a comparison 


to known results, we would like to determine values of 
the QBER and the propagation distance for which the 
phase-entangled coherent state based protocol gives an 
improved secret key fraction as compared to biphoton 
based QKD protocols, i.e. K > Rbiphoton- We cal¬ 
culate numerically the critical QBER Q cr it. such that 
A'biphoton = K at a given distance. When the QBER 
exceeds Q C rit.> the protocol based on the phase-entangled 
coherent state will have a higher secret key rate than the 
biphoton-based protocol, i.e. for Q > Q C rit. we find that 
K > A'biphoton ■ We plot this critical QBER as a function 
of distance in Fig. 2. We find that our approach using 
Schrodinger cat states is superior whenever the QBER 
for the depolarizing channel exceeds the black line in 
Fig. 2. For example, we find that at a distance of 11 
km, if the quantum bit error rate is 6 . 6 %, our protocol 
has a secret key rate roughly twice that of the biphoton- 
based protocol. It can be seen that at large distances, 
our approach is superior when the QBER of the depolar¬ 
izing channel exceeds 6.7%. Further, it is clear that there 
are QBERs for which the depolarizing channel cannot be 
used at all (Q > 0.715), whereas the phase-entangled co¬ 
herent state approach is viable over any distance. This 
analysis, which is valid only for a pure-loss channel for 
the phase-entangled diQKD protocol, suggests that there 
may be physical channels in which the coherent state ap¬ 
proach is superior to alternative protocols, even in the 
presence of noise. 

Examination of Fig. 1 and Fig. 2 reveals another 
advantage of the Schrodinger cat implementation of 
diQKD; by tuning 7 to the transmission distance, the se¬ 
cret key fraction can be improved dramatically for short 
distances relative to the long term scaling. This sort of 
dynamical control is not typically present in standard 
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implementations of diQKD in discrete systems. 

We now discuss the feasibility of performing the mea¬ 
surements required to implement the optimal filtering 
and to violate the Bell inequality. The primary require¬ 
ment is the ability to make projective measurements in 
a superposition of the |+) and |—) states. Techniques for 
making such a measurement are the subject of ongoing 
investigations, but recent theoretical results for Gaussian 
states as well as advances in detectors suggest that these 
types of measurements are becoming easier to implement 
experimentally. 

We briefly describe one possible approach which could 
be used to perform the required measurements using 
presently available equipment. The primary difficulty 
is to measure in an arbitrary superposition of the ba¬ 
sis states, |±). Without loss of generality, let us try 
to find a way to measure in the basis {|<^), |</>)} where 
\<j>) = c|+) + d\—) and \4>) = d*|+) - c*|—). By using 
the following rotation, we can rotate the state to the |±) 
basis, 



The result of the rotation is U\4>) = |+) and U |^) = |—). 
|+) and |—) are standard Schrodinger cat states, albeit 
with an additional phase, and can be distinguished using 
phase rotations and parity measurements. 

To implement the rotation U one can use the approach 
of Ralph et al. [34] in which U is decomposed into Euler 
rotations which can be implemented nearly deterministi¬ 
cally. The rotation above can be decomposed into 

U{6, A, a) = iR z (q)HR z (r)HR z (s), (23) 

where H is the Hadamard matrix, and R z {29) = 1 cos 0— 
ia z sin 9 is the phase rotation gate [35]. The phase rota¬ 
tion gate can be accomplished using a displacement oper¬ 
ation and teleportation and the Hadamard matrix can be 
accomplished using a teleportation-like setup [34]. The 
values of q, r, and s in (23) are given by 

q=^+£ + r), r = 29, s = | + £ - t?, (24) 

where £ = argc, rj = arg d, and tand = |d/c|. It is easy 
to see that this approach, involving five non-deterministic 
operations will surely cause a reduction in the overall se¬ 
cret key fraction. Regardless, it is possible that an im¬ 
proved measurement approach may alleviate this prob¬ 
lem. 

We have shown a novel approach to implementing a 
device-independent quantum key distribution in which 
phase-entangled coherent states are used as the informa¬ 
tion carriers. We show how a judicious choice of ini¬ 
tial states relative to the overall transmission rate of the 
channel can, in principle, lead to improved key gener¬ 
ation rates relative to depolarizing channels in device¬ 
independent quantum key distribution systems based 


on polarization entanglement. We have shown that for 
QBERs exceeding ~ 6.7%, phase-entangled states can 
be superior to polarization-entangled states, and we have 
given the explicit form of the states and measurements 
which achieve this result. We reiterate that apart from 
being secure against collective attacks and, in some in¬ 
stances, coherent attacks, our system is also flexible to 
time-varying loss in the quantum channel, for example, 
in ground-to-satellite schemes. This means, for exam¬ 
ple, that if the transmission loss suddenly decreases, the 
input states and measurements may be adapted to opti¬ 
mally make use of the updated channel. Finally, we note 
that our implementation does not require the eavesdrop¬ 
per to be restricted to Gaussian measurements. 
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